{"metadata": {"vulnerability": "CVE-2026-36356", "count": 30, "kinds": {"milestone": 4, "sighting": 7, "kev": 11, "other": 8}}, "data": [{"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-36356", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-05-03T21:00:41Z", "date_only": false, "value": "2026-05-03T21:00:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/82671", "record": "CVE-2026-36356", "field": "creation_timestamp", "uuid": "0c180f07-e97d-4b68-ac88-b75ed4410fb5", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #Remote\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-36356\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a totekuh\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-03 20:58:31\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-36356: MeiG Smart FORGE_SLT711 GoAhead - Unauthenticated OS Command Injection (RCE as root)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/82671"}, {"timestamp": "2026-05-03T23:00:13Z", "date_only": false, "value": "2026-05-03T23:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/zMIGDiZKcsuCchc0aPmk0dRYccv5m6M1w-Y-ifos8swuOP4", "record": "CVE-2026-36356", "field": "creation_timestamp", "uuid": "b9406422-7924-4750-a1a3-fac953afb827"}, {"timestamp": "2026-05-04T03:00:05Z", "date_only": false, "value": "2026-05-04T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/xOE6u0S4AhmTrHPBDYscPzMv6FpE3fbyPNbn5dJYZfuDoSw", "record": "CVE-2026-36356", "field": "creation_timestamp", "uuid": "0e35f3b4-12c3-4839-809d-ba81f9b8a2f7"}, {"timestamp": "2026-05-05T00:00:00Z", "date_only": false, "value": "2026-05-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-36356", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-05-05T14:16:08Z", "date_only": false, "value": "2026-05-05T14:16:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MWFR-MJ36-QV8W", "record": "GHSA-MWFR-MJ36-QV8W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-05-05T14:16:08.873Z", "date_only": false, "value": "2026-05-05T14:16:08.873", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-36356", "record": "FKIE_CVE-2026-36356", "field": "published"}, {"timestamp": "2026-05-05T15:31:36Z", "date_only": false, "value": "2026-05-05T15:31:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MWFR-MJ36-QV8W", "record": "GHSA-MWFR-MJ36-QV8W", "field": "published"}, {"timestamp": "2026-05-05T17:26:26.646Z", "date_only": false, "value": "2026-05-05T17:26:26.646592Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-36356", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-05-05T17:26:26.646Z", "date_only": false, "value": "2026-05-05T17:26:26.646592Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-36356", "record": "FKIE_CVE-2026-36356", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-05-05T17:26:31.899Z", "date_only": false, "value": "2026-05-05T17:26:31.899Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-36356", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-05T18:33:23Z", "date_only": false, "value": "2026-05-05T18:33:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MWFR-MJ36-QV8W", "record": "GHSA-MWFR-MJ36-QV8W", "field": "modified"}, {"timestamp": "2026-05-05T19:00:17.846Z", "date_only": false, "value": "2026-05-05T19:00:17.846880Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uoaala52f", "record": "CVE-2026-36356", "field": "creation_timestamp", "uuid": "a03e3423-4282-4f69-9a74-e3bafa8038e2", "content": "\ud83d\udd34 CVE-2026-36356 - Critical (9.1)\n\nThe GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36356/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4uoaala52f"}, {"timestamp": "2026-06-21T06:44:37Z", "date_only": false, "value": "2026-06-21T06:44:37+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2026-36356", "field": "timestamps.asserted_at", "uuid": "d1683ee2-227b-4228-9226-d64a61d93fca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-21T06:44:37Z", "date_only": false, "value": "2026-06-21T06:44:37+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2026-36356", "field": "timestamps.first_seen_at", "uuid": "d1683ee2-227b-4228-9226-d64a61d93fca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2026-36356", "field": "timestamps.last_seen_at", "uuid": "d1683ee2-227b-4228-9226-d64a61d93fca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": true, "value": "2026-06-25", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2026-36356", "field": "evidence.0.details.observation_date", "uuid": "d1683ee2-227b-4228-9226-d64a61d93fca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-25T00:00:00Z", "date_only": false, "value": "2026-06-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2026-36356", "field": "status.status_updated_at", "uuid": "d1683ee2-227b-4228-9226-d64a61d93fca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-30T09:23:59.039Z", "date_only": false, "value": "2026-06-30T09:23:59.039769Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d1683ee2-227b-4228-9226-d64a61d93fca", "record": "CVE-2026-36356", "field": "creation_timestamp", "uuid": "640cbf5a-59c6-46bb-94ff-d36064e4e51e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d1683ee2-227b-4228-9226-d64a61d93fca"}, {"timestamp": "2026-06-30T15:47:38Z", "date_only": false, "value": "2026-06-30T15:47:38+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2026-36356", "field": "timestamps.recorded_at", "uuid": "d1683ee2-227b-4228-9226-d64a61d93fca", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-05T16:16:35.278Z", "date_only": false, "value": "2026-07-05T16:16:35.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-36356", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-05T16:16:35.278Z", "date_only": false, "value": "2026-07-05T16:16:35.278Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2026-36356", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-05T17:17:33.490Z", "date_only": false, "value": "2026-07-05T17:17:33.490", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-36356", "record": "FKIE_CVE-2026-36356", "field": "lastModified"}, {"timestamp": "2026-07-06T11:48:24.300Z", "date_only": false, "value": "2026-07-06T11:48:24.300825Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxzh2gix423", "record": "CVE-2026-36356", "field": "creation_timestamp", "uuid": "c72f0ac1-9fa6-4c25-80ed-53891cc510ad", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-36356 \u0432 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 GoAhead \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 MeiG Smart FORGE_SLT711: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/4DA9FBDD-8C72-4A1B-A556-A6C4D878E03B", "url": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxzh2gix423"}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": false, "value": "2026-07-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2026-36356", "field": "timestamps.asserted_at", "uuid": "910a7498-7d64-4605-a767-ff55aefe2721", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": false, "value": "2026-07-22T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2026-36356", "field": "evidence.0.details.added_date", "uuid": "910a7498-7d64-4605-a767-ff55aefe2721", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": false, "value": "2026-07-22T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2026-36356", "field": "timestamps.first_seen_at", "uuid": "910a7498-7d64-4605-a767-ff55aefe2721", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T00:00:00Z", "date_only": false, "value": "2026-07-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2026-36356", "field": "status.status_updated_at", "uuid": "910a7498-7d64-4605-a767-ff55aefe2721", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T11:00:02Z", "date_only": false, "value": "2026-07-23T11:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2026-36356", "field": "timestamps.recorded_at", "uuid": "910a7498-7d64-4605-a767-ff55aefe2721", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-23T11:00:31.039Z", "date_only": false, "value": "2026-07-23T11:00:31.039625Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/910a7498-7d64-4605-a767-ff55aefe2721", "record": "CVE-2026-36356", "field": "creation_timestamp", "uuid": "27700ece-d760-4dfd-bf15-4ac0186a0bb8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/910a7498-7d64-4605-a767-ff55aefe2721"}]}